topic Re: Per user (or user group) access lists in Wireless

Per user (or user group) access lists

djoconnor — Sun, 04 Jul 2021 16:38:03 GMT

Does anybody know if it is possible to restrict IP access across an AP by passing back access lists, or names of access-lists in 802.1x authenticated connections?

I know this is common enough on RAS, switches and VPN enbpoints but does anybody know of a way to do it with Access Points?

I have to main classes of users and are unable to use vlans to implement security and are looking for alternatives.

Re: Per user (or user group) access lists

murabi — Wed, 19 May 2004 13:37:45 GMT

You can enable IP based filters on the APs for more details check the following URL,

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo1100/accsspts/i12215ja/i12215sc/s15filt.htm#wp1034899

Re: Per user (or user group) access lists

djoconnor — Wed, 19 May 2004 22:12:08 GMT

Hi,

I looked at the static filters definitions and they don't do what I need. I need to be able to send down to the AP (perhaps from a RADIUS server during 802.1x authentication negotiation) an access list to apply.

What I'd really like is for all associated clients to appear on the access point as virtual interfaces so I could manage each association independently of the others.